WhatsApp Spam Law 2026: ₪1K/Msg Fine + Opt-In Defense

WhatsApp marketing in Israel is legal — but only if you have explicit prior consent (opt-in), offer easy unsubscribe, and send within permitted hours (08:00-21:00). Violating the spam law (Amendment 40) can lead to civil liability of up to ₪1,000 per message without any proof of damage required.

Why Israeli Marketing Law Matters for WhatsApp

“A message of a commercial nature shall not be sent without obtaining the prior consent of the recipient, in writing including by electronic means.” — Israel Communications Law Amendment 40 (Nevo legal database, Hebrew source)

“The court awards damages up to NIS 1,000 per offense, without proof of damage, in addition to any other relief.” — Israeli Communications Law, Section 30A(i)(1)

Israel’s spam law is among the strictest in the world. Amendment 40 of the Communications (Bezeq and Broadcasts) Law was first passed in 2008 and has been made tighter over the years. You can read the full statutory text on Nevo. The body that oversees communications is the Ministry of Communications, and data-protection enforcement — including the DPIA documents required by Amendment 13 — falls under the Privacy Protection Authority. In 2020, Israel’s Supreme Court confirmed that WhatsApp messages count under this law — the same rules that apply to SMS now apply to WhatsApp. For a practical guide on running an automated WhatsApp bot within the law, see our WhatsApp automation guide.

What makes Israel’s law unusual globally: you don’t have to prove the message caused you any real harm. A single unsolicited marketing message can result in a ₪1,000 claim, just like that. Class-action lawsuits over spam have become a real business risk for Israeli SMBs — we’ve seen cases where a restaurant sending a “Happy Holiday!” WhatsApp blast to 500 customers faced a ~₪500,000 class-action claim.

Compare this to other countries:

• EU GDPR (General Data Protection Regulation): requires consent but penalties scale with company revenue, not per message
• US TCPA (Telephone Consumer Protection Act): applies mainly to SMS, $500–$1,500 per violation, but requires a class-action lawsuit or state enforcement to pursue
• UK PECR (Privacy and Electronic Communications Regulations): similar to GDPR, with penalties issued by the ICO (Information Commissioner’s Office)

Israel stands out because the fine is per message and no one has to prove harm — which makes it cheap and easy to sue a business.

Q2 2026 Update — Three Changes That Reshape WhatsApp Marketing Economics in Israel

The compliance picture changed meaningfully in Q2 2026. Three things you need to know:

1. WhatsApp Utility pricing -45% (April 2026) — Meta dropped the price of Utility-category messages (these are transactional messages only — order updates, reminders, account notifications) from $0.0073 to $0.0040 per delivered conversation. Important: this does NOT lower the cost of marketing messages (still ~$0.025 each). The wider price gap between Utility (legally safe, no opt-in required) and Marketing (subject to ₪1,000/message liability under Amendment 40) makes it even more worth building a proper technical separation between the two. Source: Meta WhatsApp Pricing.

2. WhatsApp Calling API now generally available (April 2026) — Meta opened up automated voice calls over WhatsApp for business accounts. Watch out: under Amendment 40, an unsolicited business call to a consumer counts as an advertising message — the same ₪1,000 per violation applies. The rule is identical: you need opt-in or a clear service justification. The Calling API is built for confirmed customer-service escalations, not cold outreach.

3. AI cost collapse 40-60% (Q2 2026) — Claude Haiku 4.5 ($0.80/1M input tokens) and GPT-4o-mini make it affordable to automatically check every outbound message before it sends, to classify it as “advertising” or “service.” Running AI on 1,000 messages/day for this purpose now costs $3-8/month vs. $20-40 in Q4 2025. This is a good moment to add an automated compliance check to any high-volume sending pipeline. Sources: Anthropic Pricing, OpenAI Pricing.

Bottom line for 2026: The law itself hasn’t changed since Amendment 40 took effect — but the cost of building compliant systems has dropped dramatically. Businesses sending 500+ WhatsApp messages/month should add an automated opt-in check to their sending pipeline this quarter. Cost: ~$10-30/month. Avoided liability: ₪1,000 per non-compliant message.

“Use of unofficial WhatsApp clients or modified versions of WhatsApp may violate our Terms of Service and result in account suspension.” — WhatsApp Business Terms

“Marketing messages on WhatsApp require user opt-in and may have additional regional regulations.” — Meta WhatsApp Business Solution Terms

Amendment 40 — What It Actually Says

The law covers any “advertising message” sent over any electronic channel. Here are the key definitions in plain language:

• “Advertising message”: any message whose goal is to push someone to buy a product or service, or to ask for donations.
• “Explicit consent”: a recorded agreement from the recipient made before the message was sent. Courts have clarified that a pre-ticked box doesn’t count. Neither does assumed or implied consent. “Agreement to terms and conditions” usually doesn’t count either — unless the consent to receive marketing is written out separately and clearly, not buried in the fine print.
• “Sender”: both the business whose product or service is being promoted AND whoever technically sent the message (an agency, a BSP — Business Solution Provider — or a platform). Either one can be held liable.

The most important part: section 30A(b) says liability applies even if the recipient can’t point to any actual harm. This is the clause that makes Israel’s law so aggressive.

Service Messages vs Marketing Messages

The single most important question that determines whether you need opt-in:

The tricky cases: re-engagement messages, “win-back” campaigns, birthday wishes with a coupon. Courts have generally treated these as marketing — when in doubt, get opt-in.

Here is the line that decides whether consent will hold up — what Israeli courts have accepted as valid opt-in versus what they have thrown out:

5 Valid Ways to Collect Opt-in

Based on 50+ Israeli SMB implementations:

1. Non-pre-checked website checkbox with clear language

“I agree to receive marketing messages via WhatsApp, email, and SMS from [Company Name]. I can unsubscribe at any time.” — not pre-checked. Record consent with timestamp, IP, and the form page URL.

2. Inbound WhatsApp message from the customer

When a customer messages you first, that gives you a solid opt-in for service-related follow-up on that same topic. It does NOT automatically mean you can send them unrelated marketing. Save the inbound message ID as your record.

3. Explicit checkout consent during purchase

A dedicated checkbox during cart/checkout that mentions marketing specifically. It must stand on its own — not bundled with “accept terms of service.” In 2022, the Israeli Supreme Court ruled that packaging marketing consent inside general terms-of-service doesn’t count as valid consent.

4. In-person written or verbal consent during visit

For physical businesses — clinics, salons, restaurants. Keep a signed form or voice recording. The date and time must be clear.

5. Explicit re-opt-in after policy change

If you make significant changes to how you communicate, old consents may not cover the new approach. Ask customers again via a service message (“We’ve updated our marketing — would you like to opt back in? Reply YES or ignore.”) — silence means no.

Put together, a compliant marketing flow looks like this from the customer’s side — consent first, then every promotional message carries a one-tap way out:

Meta’s WhatsApp Business API Rules (Layered On Top)

Even if your Israeli opt-in is perfectly valid, Meta’s own platform rules still apply on top:

• 24-hour rule: Free-form, back-and-forth messages are only allowed within 24 hours of the customer’s last message. Once that window closes, you must use a pre-approved template to reach out.
• Template approval: Marketing templates need Meta’s sign-off (usually 24-48 hours). If a template is rejected, you can revise and resubmit it.
• Quality rating: Green (high) → Yellow (medium) → Red (low). Falling below Medium limits how many messages you can send; hitting Low triggers automatic suspension.
• Tier limits: Tier 1 (1,000 unique customers / 24h) → Tier 2 (10K) → Tier 3 (100K) → Tier 4 (unlimited). Moving up requires a consistently strong quality rating over time.

2026 addition — unanswered-message signal: if too many of your messages go unanswered, WhatsApp may flag your account — even if every recipient technically opted in. See our WhatsApp spam detection guide for a full breakdown of how that detection works.

Real Compliance Pattern from 50+ Deployments

Here’s the pattern we deploy for clients running WhatsApp marketing legally in Israel:

1. Opt-in form on website — separate checkbox, non-pre-checked, with clear marketing language
2. Immediate confirmation via Utility template — “Thanks for subscribing! Reply STOP anytime to unsubscribe.”
3. Marketing sent only via Marketing-category templates — Meta-approved, tracked separately
4. Automated STOP handler in n8n — when someone replies STOP, removes them from the list within 30 seconds, logs the opt-out with a timestamp, and never re-adds them
5. Service messages on a separate Utility pipeline — order confirmations, reminders — always delivered regardless of marketing opt-out
6. Weekly quality rating check — automated alert if rating drops to Medium or below
7. DPIA document stored in shared drive — per Amendment 13 (2026), can be produced on demand
8. Send window gate — n8n filter that blocks outbound marketing outside 08:00–21:00 local time

Cost: custom-quoted per scope — typically ₪6,500–₪12,000 one-time setup + ₪150–300/month operations (n8n hosting + WhatsApp API).

What to Do If You Receive a Complaint

If a customer threatens legal action over a message they say was unsolicited:

1. Don’t ignore it — Israeli class-action attorneys are aggressive, and not responding can be treated as evidence that you knew what you were doing.
2. Pull the opt-in record — the date, the source, and the exact consent text the person agreed to. If you have it, share it immediately.
3. If you don’t have it — remove the contact, send a written apology, and consider a token settlement (₪100–250 typically resolves single-plaintiff cases). Talk to an attorney before putting anything in writing.
4. Consider whether it’s part of an organized effort — some attorneys specifically scan for spam law violations to build class-action cases. If you see the same complaint pattern coming from unknown contacts, get legal advice immediately.

Related Resources on Compliance

• WhatsApp Business API guide — technical setup + template approval flow
• WhatsApp spam detection 2026 — Meta’s detection algorithm
• Customer service chatbot guide — using service (not marketing) templates for support
• Free WhatsApp bot 2026 guide — if you are evaluating low-budget options, this lists which paths can stay compliant and which silently break Amendment 40

External Sources

• Israeli Communications Law (תיקון 40) — Amendment 40 full text
• Israel Privacy Protection Authority — official regulator
• Israel Ministry of Justice — Privacy Protection — enforcement body
• Meta WhatsApp Business Policy — Meta’s marketing policies
• WhatsApp Business Solution Terms — opt-in requirements

Summary

WhatsApp marketing in Israel is legal, effective, and sustainable — if you follow the rules. The law is strict, but the rules are simple: opt-in documented, easy opt-out, service vs marketing separation, quality rating monitoring. Violations are expensive; compliance is not.

Need help setting up a compliant WhatsApp marketing flow? Contact us for a free 20-minute consultation — no commitment. We’ll review your current setup and identify compliance risks before you send another message.

Want to automate legally?

• Full pricing — WhatsApp bot from $1,000
• Free consultation — 20 minutes, no commitment
• WhatsApp bot for business — 24/7 automated support
• Business automation — system integration and workflow